Merge pull request #7890 from corda/cc/dev/os/4.9/security_vulnerabilities

ENT-12317,ENT-12333,ENT-12431 - Dependency updates
This commit is contained in:
Adel El-Beik 2024-12-06 17:08:46 +00:00 committed by GitHub
commit 045042fb72
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -63,7 +63,7 @@ buildscript {
ext.asm_version = '7.1'
ext.artemis_version = '2.19.1'
// TODO Upgrade Jackson only when corda is using kotlin 1.3.10
ext.jackson_version = '2.13.5'
ext.jackson_version = '2.14.0'
ext.jackson_kotlin_version = '2.9.7'
ext.jetty_version = '9.4.56.v20240826'
ext.jersey_version = '2.25'
@ -502,13 +502,8 @@ allprojects {
if (details.requested.group == 'org.apache.commons') {
if (details.requested.name == "commons-configuration2") {
details.useVersion commons_configuration2_version
} else if (details.requested.name == "commons-text") {
details.useVersion commons_text_version
}
}
if (details.requested.group == 'org.yaml' && details.requested.name == 'snakeyaml') {
details.useVersion snake_yaml_version
}
}
}
}